| @@ -193,12 +193,14 @@ | ||
| 193 | 193 | */ |
| 194 | 194 | public function ajax_callback_save_api_key() { |
| 195 | 195 | check_ajax_referer( 'ayg_ajax_nonce', 'security' ); |
| 196 | 196 | |
| 197 | - $general_settings = get_option( 'ayg_general_settings' ); | |
| 198 | - $general_settings['api_key'] = sanitize_text_field( $_POST['api_key'] ); | |
| 197 | + if ( current_user_can( 'manage_options' ) ) { | |
| 198 | + $general_settings = get_option( 'ayg_general_settings' ); | |
| 199 | + $general_settings['api_key'] = sanitize_text_field( $_POST['api_key'] ); | |
| 199 | 200 | |
| 200 | - update_option( 'ayg_general_settings', $general_settings ); | |
| 201 | + update_option( 'ayg_general_settings', $general_settings ); | |
| 202 | + } | |
| 201 | 203 | |
| 202 | 204 | wp_die(); |
| 203 | 205 | } |
| 204 | 206 | |
